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CLAIMS 

What is claimed is: 

1 . A method for providing security services in a clustered data processing environment, said 
method comprising the steps of: 

providing an access program layer on at least two data processing nodes of said clustered 
environment, said layer presenting a consistent security interface to applications which run on 
said nodes; 

providing at least one security program module which implements a security service 
within said cluster; and 

providing at least one adapter module for each security program module, wherein said at 
least one adapter module maps parameters of said security service to said security interface. 

2. The method of claim 1 in which there are a plurality of more than two of said data processing 
nodes. 

3. The method of claim 1 in which there are a plurality of security program modules. 

4. The method of claim 1 in which there are a plurality of said adapter modules. 

5. The method of claim 1 in which said access program layer includes authentication and 
authorization services through said security interface. 

6. The method of claim 1 in which said access program layer includes access control services 
through said security interface. 
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7. The method of claim 6 in which said access control list includes entries grouped by at least one 
characteristic selected from the group consisting of type, mechanism, identity and permission bit 
mask. 

8. The method of claim 1 in which said access program layer loads security program modules 
identified through said security interface. 
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